Privacy Policy

HoloSnap is a mobile app that lets you scan Pokémon Trading Card Game cards with your device camera and track their estimated market prices over time. The app and the getholosnap.com website are operated by Elemental Ridge Ltd., a company registered in the United Kingdom, which is the data controller for the personal information described here. This Privacy Policy covers both the app and the website — including account registration and web checkout — and describes what information we collect, how it is used, and the choices you have.

1. Information we collect

Camera and card scans

HoloSnap uses your device camera to recognize cards. Some scans are read on your device: the app extracts the printed text locally and sends only that extracted text — not the photo — to our server for matching. Other scans send the captured card image to our backend, which passes it to a third-party AI service (OpenRouter / Google Gemini) that reads the printed text so we can identify the card. We do not retain raw photos beyond what is required to return a match, and server-side scan logs are automatically deleted after 7 days.

Collection and tracking data

When you save a card to your collection, we store the card identifier, the date you added it, any quantity or condition you record, and the price snapshots we display so we can show you historical price trends.

Account information

If you create an account or sign in — with Sign in with Apple, Google Sign-In, or an emailed login code — we store your email address and the authentication tokens issued by our identity provider so we can keep you signed in across sessions and devices. If you register or check out on the getholosnap.com website, the same account information applies there.

Device and usage data

We collect technical information such as app version, device model, operating system version, crash logs, and usage events. The app also generates and keeps a persistent app-scoped device identifier, which we use to enforce free-tier limits and to distinguish devices in our diagnostics. The crash and usage telemetry is not used to identify you personally — it helps us fix bugs and improve the app.

Push notification tokens

If you enable notifications, we collect the push notification token issued by your device so we can deliver notifications to you. You can turn notifications off at any time in your device settings.

Price alert watches

If you set a price alert on a card, our server stores your user ID, the watched card, and your alert settings (the type of alert and the threshold you chose) for as long as the alert is active. The watch record is deleted when the alert fires or when you remove it.

2. How we use information

• To recognize cards from the photos you take.
• To display current and historical prices for cards in your collection.
• To store cloud backups of your collection when you are signed in — backups are made manually or about weekly, and restoring one replaces the data on the device with that snapshot.
• To diagnose crashes and improve the app.
• To respond to support requests.

We do not sell your personal information in exchange for money. With your consent, we share your device's advertising identifier with our advertising partners for install attribution and campaign measurement, which may qualify as "sharing" under California law; you can withdraw that consent at any time in iOS Settings > Privacy & Security > Tracking (see Advertising & tracking below).

3. Advertising & tracking

On iOS, HoloSnap shows Apple's App Tracking Transparency (ATT) prompt. Only if you allow tracking do we collect your device's advertising identifier (IDFA). With your consent, the IDFA is used for install attribution and ad-campaign measurement through AppsFlyer, our mobile measurement partner, and is shared with the ad networks we advertise on (such as Meta and Google) to measure campaign performance. If you decline the prompt, the IDFA is not collected. You can revoke your consent at any time in iOS Settings > Privacy & Security > Tracking.

4. Third-party services

HoloSnap relies on third-party providers to operate, including Cloudflare for hosting and content delivery, Google (Firebase) for authentication, database, cloud functions, and backup storage, Sentry for crash and error reporting, OpenRouter / Google Gemini for the AI card-recognition step described above, RevenueCat for subscription management and receipt validation (it receives an app user ID and purchase data), Stripe for payments made through web checkout on our website, Resend for delivering login-code emails, AppsFlyer for install attribution and ad measurement (see Advertising & tracking above), and the Apple App Store for distribution and in-app purchases. These providers have their own privacy policies, which we encourage you to review, and we require them to protect your data to at least the same standard described in this policy.

5. Your choices

• You can revoke camera access at any time from your device settings; the rest of the app will continue to work, but card scanning will be disabled.
• You can delete cards from your collection, or delete your account, from within the app.
• Deleting your account removes the collection and account data associated with it (see Data retention below).

6. Your rights

Depending on where you live — including under the UK GDPR, the EU GDPR, and the California Consumer Privacy Act (CCPA) — you may have the right to access, correct, or delete your personal information, to receive a copy of it in a portable format, and to object to or restrict certain processing. We do not sell your personal information for money; the only "sharing" under California law is the consent-based advertising identifier disclosure described in the Advertising & tracking section, which you can withdraw in iOS Settings > Privacy & Security > Tracking. To exercise any of these rights, email us at support@getholosnap.com — we will not discriminate against you for doing so. You also have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO).

7. Data retention

We keep collection data for as long as your account is active. When you delete your account, we remove your associated data within 30 days, except where retention is required for legal, security, or fraud-prevention reasons. Server-side scan logs are deleted after 7 days, as described above.

8. Children

HoloSnap is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Security

We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure, however, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated in-app.

11. Contact

For privacy-related questions or to exercise data rights, email support@getholosnap.com, contact us, or use the support channel listed in the HoloSnap mobile application. This policy is provided by Elemental Ridge Ltd., the operator of HoloSnap and getholosnap.com.